skills/reason-machines/devtools-skills/deltarune-chapter5-trainer-detection-analysis/Gen Agent Trust Hub
deltarune-chapter5-trainer-detection-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides educational Python code snippets that demonstrate how to interact with the Windows API using
ctypes. The code includes calls toReadProcessMemoryandOpenProcessto explain memory manipulation techniques used in trainers. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted game trainer code or queries (e.g., 'analyze this trainer code'), creating a vulnerability surface where instructions embedded in the analyzed code could potentially influence the agent's behavior.
- Ingestion points: User-provided trainer code or snippets passed via analysis triggers.
- Boundary markers: None; the skill does not explicitly delimit or isolate the code being analyzed from the agent's instructions.
- Capability inventory: The provided scripts include capabilities for memory access (
ctypes), PE file analysis (pefile), and regex-based URL detection. - Sanitization: No explicit sanitization or escaping is implemented for the code snippets being processed.
- [EXTERNAL_DOWNLOADS]: Mentions external download sites, including well-known services like Netlify (
skydock.netlify.app), in the context of identifying and warning users about malware delivery flows.
Audit Metadata